kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query

A NULL pointer dereference issue was found in the Linux kernel's vmwgfx driver in vmwcmddxdefinequery. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, who can issue an ioctl on the resulting file descriptor, to crash the system, causi...

Microsoft Windows DirectX GpuMmu Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of GP...

PT-2023-6138 · Microsoft · Windows Directx +2

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Windows DirectX affected versions not specified Description: The issue is related to a synchronization error, specifically a race condition, when using a shared resource in the Window...

August 8, 2023—KB5029250 (OS Build 20348.1906)

None None...

May 9, 2023—KB5026362 (OS Build 17763.4377) - EXPIRED

None None...

May 9, 2023—KB5026370 (OS Build 20348.1726)

None None...

Improper Input Validation

Overview directxtexdesktop2017 is a DirectXTex texture processing library Affected versions of this package are vulnerable to Improper Input Validation in the ConvertToSinglePlane function in DirectXTexConvert.cpp, when processing an invalid height value from the DDS loader for planar video...

The vulnerability of the DirectX Graphics Kernel Driver (DXGKRNL) on Microsoft Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

Microsoft Patch Tuesday, December 2022 Edition

Microsoft has released its final monthly batch of security updates for 2022, fixing more than four dozen security holes in its various Windows operating systems and related software. The most pressing patches include a zero-day in a Windows feature that tries to flag malicious files from the Web,...

CVE-2022-44710

DirectX Graphics Kernel Elevation of Privilege Vulnerability...

CVE-2022-44710

DirectX Graphics Kernel Elevation of Privilege Vulnerability...

CVE-2022-44710

DirectX Graphics Kernel Elevation of Privilege Vulnerability...

Privilege escalation

DirectX Graphics Kernel Elevation of Privilege Vulnerability...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2022-44710 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2022-44710 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

PT-2022-5869 · Microsoft · Directx Graphics Kernel +1

Name of the Vulnerable Software and Affected Versions: DirectX Graphics Kernel versions affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the DirectX Graphics Kernel driver of Microsoft Windows operating systems. This can...

CVE-2022-44710

CVE-2022-44710: DirectX Graphics Kernel Elevation of Privilege vulnerability in Windows, reportedly exploitable via a race condition and requiring local access with low privileges; CVSS v3.1 base score 7.8 (HIGH). Patch guidance is to install the relevant Windows updates (as per December 2022 Pat...

Microsoft Windows DirectX 安全漏洞

Microsoft Windows DirectX is the DirectX End-User Runtime Web Installer from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows DirectX. The following products and versions are affected: Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root rights Remote co...